Categories: Malware

Troj/CeeInj-M (file analysis)

The Troj/CeeInj-M is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Troj/CeeInj-M virus can do?

Behavioural detection: Executable code extraction – unpacking
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Behavioural detection: Injection (Process Hollowing)
Behavioural detection: Injection (inter-process)

How to determine Troj/CeeInj-M?


File Info:
name: 44E3B77D27E5973000CD.mlwpath: /opt/CAPEv2/storage/binaries/6785ef978855d743fb9b4baafaac550853874da6b8e519921e697c07b54520d4crc32: 3EFCEE78md5: 44e3b77d27e5973000cd12b6cf550e9bsha1: 778228421923aafe38632287c7fbc141ede677a9sha256: 6785ef978855d743fb9b4baafaac550853874da6b8e519921e697c07b54520d4sha512: e42f5cc85b5570b4e6b361e8b27c23f1ae5529f600b110161dfdfa48367a472d4eb0a2624fce7ebff1004eca2f6d2a26b91fdb1bdb6719f96e143959c69daea4ssdeep: 768:+yB11J9AqnPkQMqtLmr/j58jiHPhprQI3G:7BrJ6mEqtLmr/j5YQMDtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1C0C28CD2A3D4801AE3B39BB0A5A2DBD315EFBCF44FA6F51745941C8828A0692D331F47sha3_384: 858812399acb0419c6852922a70f8db96e5ef91e53fda871a58b385d68639b85f1fcb12abccbfef809354119ead888ebep_bytes: 558bec81ec0401000057c685fcfefffftimestamp: 2011-01-20 00:38:21
Version Info:
CompanyName: Adobe Systems, Inc.FileDescription: Adobe? Flash? Player Installer/Uninstaller 10.1 r53FileVersion: 10,1,53,64InternalName: Adobe? Flash? Player Installer/Uninstaller 10.1LegalCopyright: Copyright ? 1996-2010 Adobe, Inc.LegalTrademarks: Adobe? Flash? PlayerOriginalFilename: FlashUtil.exeProductName: Flash? Player Installer/UninstallerProductVersion: 10,1,53,64Translation: 0x0409 0x04b0

Troj/CeeInj-M also known as:

Bkav	W32.InNhcA.Worm
MicroWorld-eScan	Trojan.GenericKDZ.74269
ClamAV	Win.Trojan.Inject-132
FireEye	Generic.mg.44e3b77d27e59730
CAT-QuickHeal	Backdoor.Simbot.G4
McAfee	BackDoor-EYG
Zillya	Trojan.InjectGen.Win32.4
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 002331771 )
K7GW	Trojan ( 001fbdf71 )
Cybereason	malicious.d27e59
Baidu	Win32.Trojan.Inject.bf
VirIT	Trojan.Win32.Dwnldr.AA
Cyren	W32/Injector.AV.gen!Eldorado
Symantec	Trojan.Dropper
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Injector.ELH
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan.Win32.Inject.bbyo
BitDefender	Trojan.GenericKDZ.74269
NANO-Antivirus	Trojan.Win32.Inject.csnmkc
SUPERAntiSpyware	Backdoor.Agent/Gen-Simbot
Avast	Win32:Taidoor-D [Trj]
DrWeb	Trojan.DownLoad2.36100
VIPRE	Trojan.GenericKDZ.74269
TrendMicro	TROJ_KRYPTK.SMS
McAfee-GW-Edition	BehavesLike.Win32.Backdoor.mh
Trapmine	malicious.high.ml.score
Sophos	Troj/CeeInj-M
Ikarus	Trojan.Win32.Injector
GData	Trojan.GenericKDZ.74269
Avira	TR/Crypt.ZPACK.Gen
MAX	malware (ai score=82)
Antiy-AVL	Trojan/Win32.Inject.bbyo
Xcitium	TrojWare.Win32.Inject.ka@4o81ww
Arcabit	Trojan.Generic.D1221D
ViRobot	Trojan.Win32.Cson.Gen.A
Microsoft	Trojan:Win32/Spy.Zbot.ACM!MTB
Google	Detected
AhnLab-V3	Backdoor/Win32.CSon.R7666
BitDefenderTheta	AI:Packer.721905D21F
VBA32	SScope.Backdoor.Simbot
Cylance	unsafe
TrendMicro-HouseCall	TROJ_KRYPTK.SMS
Tencent	Trojan.Win32.Inject.bbyoa
Yandex	Trojan.GenAsa!5YxMY2U2QLk
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Inject.bbyo
Fortinet	W32/Injector.ELH!tr
AVG	Win32:Taidoor-D [Trj]
Panda	Generic Suspicious
CrowdStrike	win/malicious_confidence_100% (D)